Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: K0J1MfWJe+8Pl7G2ALiNGVefZBSNUgE4RBXR/6I3Pgo=
Subject key identifier: 29:0D:1E:1A:83:CC:18:9D:C1:34:7C:DB:BD:B3:13:4B:4B:8F:8D:89
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01A0CB22F3AF866B9A1B57E5B502303F57AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0B84
Signing time: Tue 22 Sep 2026 22:01:00 +0000
Manifest this update: Tue 22 Sep 2026 22:01:00 +0000
Manifest next update: Wed 23 Sep 2026 22:01:00 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: afJL9MfJ6K+fm+72U1lFAYHgQtOYDz9xftSbZAQiwoI=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:f3:af:86:6b:9a:1b:57:e5:b5:02:30:3f:57:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Sep 22 22:01:00 2026 GMT
Not After : Sep 23 22:01:00 2026 GMT
Subject: CN=290d1e1a83cc189dc1347cdbbdb3134b4b8f8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:3b:86:b4:7e:d4:b1:21:58:cb:23:11:0d:
34:8c:00:9e:07:29:bd:7b:54:6e:d5:58:66:a2:06:
40:98:00:f6:75:ea:01:a5:7c:42:4f:04:a1:39:bd:
64:25:df:21:60:12:0c:30:66:2d:f6:21:dc:49:8c:
b6:bf:fa:b4:50:4f:43:f0:eb:68:32:77:2c:c2:4f:
10:c5:a6:ae:a4:21:fe:e8:16:02:ab:aa:6f:9c:76:
b2:c5:3e:f5:00:70:08:00:e0:69:ca:b5:99:81:8e:
97:a9:0a:ed:fb:1a:25:27:79:86:63:37:23:06:12:
34:23:89:43:d9:6d:9f:e5:b7:ab:19:a6:8d:a8:27:
ca:7c:fc:aa:ed:ae:4f:d3:93:37:e9:84:04:11:07:
d9:5b:32:19:a6:1f:23:99:11:73:15:7b:c6:11:95:
df:f1:25:97:5e:6b:a7:d4:4b:19:a9:ef:91:fd:a8:
08:95:93:9a:67:b5:35:41:2f:97:57:b5:f1:70:84:
9d:b7:d7:4f:d9:bd:c8:53:28:61:a5:1b:ef:e0:96:
b1:b7:52:a8:94:60:92:89:b7:4f:74:cf:0b:8f:29:
3b:0f:88:39:76:7b:59:af:29:c3:cb:55:36:72:70:
1b:63:f0:d2:a6:11:2e:11:5e:48:f0:34:e4:76:0c:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:1E:1A:83:CC:18:9D:C1:34:7C:DB:BD:B3:13:4B:4B:8F:8D:89
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ff:12:f6:fb:53:5b:c1:1a:aa:d8:eb:47:cb:76:0a:dd:e5:
a2:7a:d5:3c:af:4e:88:1e:11:c9:98:e8:19:e3:ad:cc:47:27:
8e:1f:d9:ab:45:43:9d:5c:88:8d:4d:67:9b:2a:c1:ce:a8:7b:
dc:35:8e:d9:9e:50:40:f0:5d:10:aa:b0:d0:82:0f:f9:8e:12:
19:40:36:01:70:ca:bb:0f:d0:64:b7:a3:c7:fe:eb:27:a4:83:
94:77:64:57:dc:a4:db:fd:cd:1f:ef:9a:92:00:b1:20:fb:65:
c1:ab:89:0f:f5:c9:aa:0b:c6:ea:b6:9a:e2:d1:5e:01:fb:a9:
f8:a8:f9:cb:69:1b:49:6d:aa:8d:b1:3b:ce:44:8e:33:d0:ea:
5e:d9:9a:81:93:fe:d4:6a:52:66:9c:d7:38:b8:c8:68:8b:f0:
be:b6:22:cc:aa:94:30:52:3b:c3:85:2c:4e:7d:4a:f1:cd:f6:
26:e4:7b:80:a4:43:c2:eb:f8:d3:d3:67:2c:ab:2b:27:9f:7f:
ac:92:21:71:23:4e:8d:48:b8:86:2c:72:04:d5:9d:6f:4b:3a:
d5:77:d6:36:f5:e9:42:aa:9c:5e:1f:5a:c3:14:76:ef:db:2a:
03:e0:87:b7:d2:5d:34:00:4a:ba:32:fc:11:53:33:f7:8a:cb:
0b:c4:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:04:23 2026 by rpki-client